Following the Swedish DPA’s (IMY) announcement in its 2024 annual report to adopt a more risk-based approach to supervision, IMY has now identified five key areas for 2025. These priorities aim to provide clearer regulatory guidance and strengthen enforcement efforts.
These five focus areas include:
- Employers’ handling of employee personal data (in particular employee monitoring and background checks).
- The use of AI systems for processing personal data in the healthcare sector.
- Digital tools in healthcare and social care, with a focus on protecting patients’ personal data.
- CCTV surveillance, particularly by entities that previously required a permit from IMY.
- Guidance on how children can safeguard their personal data.
You can find the full report here (in Swedish only).
